3 Commits

Include renames

Author	SHA1	Message	Date
nesquena-hermes	bc6949219d	Release v0.51.317 — Release KG (Phase 3 light: align CSP enforcement with report policy, #3727) (#3786) ... Phase-3-LOW backend security fix. #3727 (@rodboev, #1909): enforced CSP now honors the same connect-src as report-only (built from one shared template). Full suite 8205 passed, Codex SAFE (live-verified headers), Opus SHIP. Co-authored-by: rodboev <rodboev@users.noreply.github.com>	2026-06-07 10:52:07 -07:00
ChaseFlorell	9a6e7483f6	test: align csp test with pathlib rooting pattern from existing suite ... Use Path(__file__).resolve().parents[1] so the test survives being run from a non-repo-root cwd, matching test_issue1112_csp_google_fonts.py. Absorbed from PR #1852 follow-up commit 1448f42 by @ChaseFlorell. Co-authored-by: Chase Florell <ChaseFlorell@users.noreply.github.com>	2026-05-07 21:14:16 +00:00
ChaseFlorell	d8612ba323	fix: add cdn.jsdelivr.net to CSP connect-src to allow xterm source map fetches ... Closes #1850 Co-authored-by: Chase Florell <ChaseFlorell@users.noreply.github.com>	2026-05-07 20:42:55 +00:00